Employee Theft & Internal Fraud: Are You Covered? | donegan
Theft Is the Claim Owners Don’t Expect
When business owners picture a serious loss, they tend to imagine a fire, a storm, or a lawsuit. The reality is quieter and, for a lot of owners, harder to hear. Theft is the single most frequently filed business insurance claim, and a surprising share of it does not come from the customer who slips something in a bag on the way out. It comes from inside, from the people who have keys, passwords, and the owner’s trust.
The numbers tell the story plainly enough. Industry data attributes roughly 42 percent of inventory loss in U.S. stores to employee theft rather than to shoplifters. And internal theft rarely looks like a dramatic heist. It looks like skimmed cash at the register, padded expense reports, a fake vendor that quietly collects payments for services no one ever received, or inventory walking out the back door a little at a time over months and years. Because each individual instance is small, it slips under the radar, which is exactly why the total can grow so large before anyone notices.
That slow-burn quality is what makes internal fraud so costly. A fire announces itself. Theft hides. The longer it goes undetected, the larger the loss becomes, and by the time the pattern is obvious, the money is usually long gone. There is also a second cost that does not show up on any claim form: the trust that breaks when an owner learns that a long-time, well-liked employee was the source. That part is hard to put a number on, and owners who have lived through it will tell you it lingers.
Two Things That Protect You
Two things protect a business here, and they work best together. The first is strong internal controls. The single most effective one is separation of duties, meaning the person who handles money is not the same person who reconciles the books. When one individual can both create a payment and approve it, you have built a road with no guardrails. Beyond that, requiring approvals for payments above a set threshold, reviewing bank and credit card statements personally rather than delegating that entirely, rotating duties when you can, and running periodic surprise counts of cash and inventory all make theft harder to hide. None of this requires distrusting your team. It requires building a system where an honest employee is protected from suspicion and a dishonest one finds no easy opening.
The second protection is the right insurance, and this is where a lot of owners discover a gap at the worst possible moment. A standard commercial property policy is built to respond to physical damage, fire, wind, water, and the like. It is generally not built to make you whole when an employee steals from you. The coverage that does that work is commercial crime, sometimes written as employee dishonesty coverage. It is designed specifically for losses caused by the theft of money, securities, or property by your own people, and in many cases it can be extended to address related exposures like forgery, funds transfer fraud, and computer fraud.
The Coverage Gap Owners Discover Too Late
Here is the trap we see most often. Many owners assume crime coverage is automatically bundled into their business owners policy or commercial package, and a great many are surprised to learn that it is either missing entirely or capped at a limit far too low to matter. A package policy might include a modest sublimit, a few thousand dollars, that bears no relationship to what a determined insider could actually take over time. The day an owner finds this out should not be the day they file the claim, but too often it is.
So the practical move is simple and it costs nothing to start: confirm what you actually carry. Pull your policy, or let us pull it with you, and look for two things. Is commercial crime or employee dishonesty coverage actually on the policy, and if so, is the limit realistic given how much money and inventory flow through your business in a year? An owner with significant cash handling, valuable inventory, or a small accounting team carries more of this exposure than a quote ever reflects, and the limit should be sized to the real risk, not to a default.
Knowing the Warning Signs
It also helps to know what internal theft tends to look like before it becomes a crisis, because the warning signs are often visible if someone is watching. An employee who refuses to take vacation or resists letting anyone else touch their part of the books may be protecting a scheme rather than showing dedication. Vendors no one can quite place, invoices that are just under an approval threshold, customer complaints about payments that were made but not credited, and inventory counts that never quite reconcile are all worth a second look. None of these proves anything on its own, and most have innocent explanations. But a pattern of them is a reason to slow down and verify, and the businesses that catch internal fraud early are almost always the ones where the owner stayed close enough to the numbers to notice when something felt off.
Trust, Backed by Controls
It is worth saying that this is not a reason to view your team with suspicion. The overwhelming majority of employees are honest, and a business that runs on fear is not a healthy one. The point is the same one we make about every other risk: you protect against the things that can quietly take a company down, not because you expect them, but because the cost of being wrong is so high. Good controls and the right coverage let you extend trust to your people while making sure a single bad actor cannot undo years of work.
At donegan, we help business owners confirm they actually carry this protection and that the limits match reality, because the assumption that it is ‘in there somewhere’ is one of the more expensive guesses a business can make. If it has been a while since anyone looked closely at your crime coverage and your internal controls together, that is a conversation worth having before a loss forces it.
Frequently Asked Questions
Doesn’t my property policy cover employee theft?
Usually not in any meaningful way. Commercial property insurance is built for physical damage like fire and storms. Theft by your own employees is addressed by commercial crime or employee dishonesty coverage, which is a separate coverage that is sometimes missing or carries a very low sublimit on package policies.
What is the most effective internal control against employee theft?
Separation of duties: the person who handles money should not be the same person who reconciles the books or approves payments. Pair that with personal review of statements, required approvals for larger payments, and periodic surprise counts, and you remove most of the easy opportunities.
How much commercial crime coverage should I carry?
It depends on how much money and inventory move through your business and how concentrated your financial duties are. A business with heavy cash handling, valuable stock, or a small accounting team carries more exposure. We can help you set a limit that reflects your actual risk rather than a default amount.
What kinds of loss does commercial crime coverage respond to?
Typically theft of money, securities, or property by employees, and depending on how it is written, it can extend to forgery, funds transfer fraud, and computer fraud. The exact scope depends on your policy form, which is worth reviewing.
